POPA ReconBofur Capital loses $2M in address-poisoning attack after Compound withdrawal…
Bofur Capital loses $2M in address-poisoning attack after Compound withdrawal… Phisher sent a 0.0002 USDC dust tx to spoof the address, and the victim copy-pasted the wrong one -$2M drained. Now several important OpSec tips: 1. Use an address book (whitelist)! 2. Never copy/paste an address from the transaction history (etherscan or blockscan); 3. Using a test transaction with a small sum is not a proper defence against address poisoning! This is generally a bad habit. • https://x.com/officer_secret/status/2090972790320922983?s=46 #security #opsec
The excerpt is quoted from a public Telegram channel, which owns its text.